Island MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| AUTH_MODE | No | If env (default), credentials are read from ISLAND_API_KEY. If gateway, credentials arrive per-request via X-Island-Api-Key/X-Island-Base-URL. | env |
| LOG_LEVEL | No | Logging level. Default is info. | info |
| MCP_TRANSPORT | No | Transport mode. Default is stdio. | stdio |
| ISLAND_API_KEY | No | API key issued by the Island Management Console, sent as the Api-Key header. | |
| ISLAND_BASE_URL | No | Optional override of the Management API base URL. Defaults to https://management.island.io/api. | https://management.island.io/api |
| CONDUIT_S2S_SECRET | No | When set, the HTTP transport requires a valid X-Gateway-S2S header on every /mcp request. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
| logging | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| island_list_admin_actionsB | List actions taken by administrators in the Island Management Console (e.g. policy changes, user/role changes) within a time window, newest first. Use start/end to bound the window; omit both for Island's server-side default window. |
| island_list_audit_eventsA | List browser/session audit events from Island's timeline (e.g. navigation, file transfer, clipboard, print, and policy-enforcement events) within a time window, newest first. Use start/end to bound the window; omit both for Island's server-side default window. |
| island_list_compromised_credentialsA | List credentials Island has detected as compromised (e.g. via dark-web/breach-corpus matching on credentials entered into the browser) within a time window, newest first. Use start/end to bound the window; omit both for Island's server-side default window. Note: at least one third-party integrator has reported this endpoint's offset pagination as unreliable in practice (returning the same page regardless of offset) - treat limit/offset as best-effort. |
| island_list_devicesA | List devices running Island Browser under this account, optionally filtered to devices last seen at/after a given time. Sortable by field (e.g. LastSeen). |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 4 tools
Each tool targets a distinct Island data type—admin actions, audit events, compromised credentials, and devices—so an agent can reliably pick the right one. The descriptions clearly separate browser/session audit events from console admin actions.
All tools follow the same island_list_<resource> snake_case pattern, making the naming highly predictable and consistent. There are no mixed conventions or vague verbs.
Four tools is slightly on the small side but reasonable for what appears to be a read-only Island security/audit data server. Each tool earns its place and the count avoids bloat.
The set covers several important listing surfaces, but it is entirely list-oriented with no get-by-id, deeper search, or management actions. For a server named broadly 'Island MCP Server', notable operational gaps remain.